Rebrand: TeamClaw -> Clawmates (clawmates.work)

Full-depth rename per the approved plan; the 'claw' product vocabulary
(claws, /claws routes, clawId, Claw Chat) stays — it is now the brand.

- Display brand: Clawmates (manifest, titles, hero, login/rail logo
  'clawmates'); default host app.clawmates.work; registry
  ghcr.io/clawmates
- Crates tc-* -> cm-* (16 crates + all imports); binaries
  clawmates-server/broker/bundler; images clawmates/*; env prefix
  CLAWMATES_* (+ CM_TEST_DATABASE_URL / CM_LIVE_LLM); config
  clawmates.toml; helm chart deploy/helm/clawmates with clawmates-*
  resources; db names clawmates*; sockets /run/clawmates; cookie
  cm_session; kind cluster clawmates-test; seccomp node profile
  clawmates-agent-profile.json
- All 9 Playwright brand assertions updated in lockstep; historical
  spec document left untouched as the only remaining 'TeamClaw'
- Local env migrated: dev pg clawmates-dev-pg/clawmates_dev, shared
  test server clawmates-test-pg, kind cluster recreated with image +
  profile, compose images rebuilt under clawmates/*

Verified end to end: 161 Rust + 68 frontend tests, 29 Playwright
journeys, 4 live kind tests, helm/install/LOC/placeholder gates, and
the clean-room install rehearsal serving the clawmates login page from
a signed bundle of the rebuilt images.

Co-Authored-By: Claude Fable 5 <[email protected]>

crates/cm-api/src/routes/skills.rs

@@ -0,0 +1,66 @@
+use axum::extract::{Query, State};
+use axum::http::StatusCode;
+use axum::Json;
+use cm_db::repo::skills::Skill;
+use cm_domain::AgentId;
+use serde::Deserialize;
+use uuid::Uuid;
+
+use crate::routes::claws::workspace_agent;
+use crate::{ApiError, AppState, Authed};
+
+#[derive(Deserialize)]
+pub struct SkillsQuery {
+    #[serde(rename = "clawId")]
+    claw_id: Option<AgentId>,
+}
+
+/// GET /api/skills — the Skill Library (§8.1); with ?clawId= the skills
+/// installed on that agent (§7.5).
+pub async fn list(
+    State(state): State<AppState>,
+    Authed(user): Authed,
+    Query(query): Query<SkillsQuery>,
+) -> Result<Json<Vec<Skill>>, ApiError> {
+    match query.claw_id {
+        Some(claw_id) => {
+            let agent = workspace_agent(&state, &user, claw_id).await?;
+            Ok(Json(
+                cm_db::repo::skills::installed(&state.pool, agent.id).await?,
+            ))
+        }
+        None => Ok(Json(
+            cm_db::repo::skills::library(&state.pool, user.workspace_id).await?,
+        )),
+    }
+}
+
+#[derive(Deserialize)]
+pub struct InstallRequest {
+    #[serde(rename = "clawId")]
+    claw_id: AgentId,
+    #[serde(rename = "skillId")]
+    skill_id: Uuid,
+}
+
+/// POST /api/skills/install
+pub async fn install(
+    State(state): State<AppState>,
+    Authed(user): Authed,
+    Json(body): Json<InstallRequest>,
+) -> Result<StatusCode, ApiError> {
+    let agent = workspace_agent(&state, &user, body.claw_id).await?;
+    cm_db::repo::skills::install(&state.pool, agent.id, body.skill_id, user.user_id).await?;
+    Ok(StatusCode::NO_CONTENT)
+}
+
+/// POST /api/skills/uninstall
+pub async fn uninstall(
+    State(state): State<AppState>,
+    Authed(user): Authed,
+    Json(body): Json<InstallRequest>,
+) -> Result<StatusCode, ApiError> {
+    let agent = workspace_agent(&state, &user, body.claw_id).await?;
+    cm_db::repo::skills::uninstall(&state.pool, agent.id, body.skill_id).await?;
+    Ok(StatusCode::NO_CONTENT)
+}